Audit And Compliance Program Manager

Details

Groq is seeking an Audit and Compliance Program Manager to run the audit program across multiple frameworks. The role will maintain a mapped control set so a single test produces evidence for every applicable framework, administer the GRC tool as the system of record, own Groq's IT policies and security training, and execute audits to mature the GRC function from reactive to proactive.

Responsibilities

• Run the audit calendar across SOC 2 Type II, ISO 27001:2022, and other frameworks.
• Manage day-to-day auditor relationships, fieldwork logistics, and evidence readiness.
• Track audit findings through closure with assigned owners and target dates.
• Maintain the control catalogue and framework mapping so one control test produces evidence for every framework it satisfies.
• Coordinate SME evidence requests so each control is evidenced once per period rather than once per framework.
• Maintain Vanta GRC as the system of record, including integration coverage, automated evidence, test ownership, and documentation within review cycles.
• Own the IT policy lifecycle, including review cadence, approvals, and acknowledgements.
• Own the security awareness training program and track completion as audit evidence.
• Report audit status, open findings, and evidence coverage to security leadership on a recurring basis.

Requirements

• 5+ years of experience in compliance program management, including hands-on execution of at least two concurrent framework audits.
• Experience mapping controls across frameworks and reducing duplicate evidence collection.
• Experience administering a GRC platform as a system of record.
• Experience managing external auditors, drafting scope statements for executive review, and coordinating subject-matter experts across stakeholders.
• Experience owning a policy lifecycle and a security awareness training program, with completion evidence that has stood up in audit.
• Experience at a Big 4 or equivalent audit firm delivering compliance engagements, with knowledge of how auditors scope, sample, and write findings.
• Legal background preferred.
• Candidates for the U.S. posting must meet applicable U.S. export control eligibility requirements, including qualifying as a U.S. Person or being eligible for an applicable export license.

Location And Work Arrangement

This role is based in one of Groq's three hiring hubs: the Dallas, San Francisco, or New York City area. The role offers flexibility to work remotely while the local Groq office is being established, with the expectation that it will transition to onsite once the office opens.

Compensation

The total cash salary range is $186,600–$252,400, inclusive of potential bonus value. Individual placement is determined by geographic location, experience, skills, and alignment with internal compensation standards. The range applies to candidates located in the United States. International compensation will vary based on local market dynamics. Groq also offers a Long-Term Incentive Program and employee benefits.